CVE-2026-2983 - Vulnerability Analysis

Overview

SourceCodester Student Result Management System 1.0 contains a broken access control vulnerability caused by improper access control in /admin/core/import_users.php Bulk Import component, letting remote attackers bypass access restrictions, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can bypass access controls, potentially leading to unauthorized data access or modification.

Mitigation

Update to the latest version or apply patches addressing access control in /admin/core/import_users.php.

References

• https://vuldb.com/?ctiid.347366
• https://vuldb.com/?id.347366
• https://vuldb.com/?submit.756135
• https://www.sourcecodester.com/
• https://github.com/Shaon-Xis/SRMS-1.0---Unauthenticated-SMTP-Hijacking-to-Account-Takeover#-vulnerability-2-unauthenticated-bulk-account-injection-arbitrary-file-upload

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner